Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6b1a7193-d28c-33c4-813b-09de315bba51.roa
File: 6b1a7193-d28c-33c4-813b-09de315bba51.roa (raw, json)
Hash identifier: lbz+/NjOBZVtIUVNu3A0iZpzvv3M0l5a4NERImR/E5o=
Subject key identifier: 59:C4:C5:A4:C2:83:18:53:82:32:CB:92:F6:28:FA:F2:52:4F:50:AD
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBD755F243C07FDE3B020
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6b1a7193-d28c-33c4-813b-09de315bba51.roa
Signing time: Wed 16 Oct 2024 14:26:35 +0000
ROA not before: Wed 16 Oct 2024 14:26:35 +0000
ROA not after: Tue 14 Jan 2025 15:26:35 +0000
asID: 81
IP address blocks: 152.45.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:bd:75:5f:24:3c:07:fd:e3:b0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:35 2024 GMT
Not After : Jan 14 15:26:35 2025 GMT
Subject: CN=b4cdccc4-50d4-42c5-bf8f-f2b52192b2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:5a:b2:bd:1e:ee:cf:0c:25:36:99:f2:51:
72:2a:d0:7a:b3:ed:7c:8a:4f:79:e6:ba:f5:63:fe:
65:87:67:ae:63:04:99:89:3d:16:52:9e:70:a9:2d:
ec:3c:f6:51:fb:0f:8a:b5:7e:28:65:f6:38:c2:77:
4b:f4:6c:95:1d:19:88:ae:6a:d4:73:7d:88:cb:5c:
4e:d2:fd:ec:c1:f2:c1:41:e0:bd:cb:20:5a:1a:4f:
fb:ea:f6:5e:1e:66:71:63:ca:a2:29:6a:3f:cf:f2:
8d:3f:53:aa:c8:33:8d:55:5d:83:55:f7:25:5d:89:
12:eb:17:1d:5a:69:46:e3:38:ca:4f:7c:5a:a5:1f:
24:30:f8:b4:da:ee:b3:51:08:f8:da:aa:79:fa:87:
82:c4:ba:9d:7e:0e:e0:7e:d0:a8:62:7c:fe:56:82:
de:c9:4c:6c:c3:87:9b:9f:0f:ae:87:03:44:31:a5:
4b:09:ac:cd:f3:84:44:ff:a8:20:cb:f6:76:76:b1:
a0:23:8e:26:b2:33:1e:5b:fe:76:c7:59:2d:80:61:
6e:65:e7:fc:25:fb:2c:46:b1:2c:aa:ad:1d:f5:db:
ca:ec:a0:5e:4f:1e:18:ef:10:2d:97:bb:52:45:53:
98:4b:39:b1:09:f0:2b:af:24:8e:62:04:c9:8a:c5:
fd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C4:C5:A4:C2:83:18:53:82:32:CB:92:F6:28:FA:F2:52:4F:50:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6b1a7193-d28c-33c4-813b-09de315bba51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.45.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:66:fe:96:fe:fa:cc:a6:a8:d6:0c:51:ca:4d:1b:f0:65:f0:
bc:70:24:f8:2d:18:0c:c1:25:52:96:c4:90:bc:66:dd:d8:49:
10:0f:b2:ec:e1:b3:5f:93:31:27:7c:78:27:a5:7d:16:8c:2b:
30:f2:dd:9c:7e:c0:13:4c:43:59:b0:11:a6:67:e9:e4:e1:0e:
69:5a:02:0d:5e:9c:04:6c:f0:b9:ea:50:3c:86:eb:05:c0:c4:
aa:d1:9f:6a:97:94:77:d4:f0:2f:89:97:f9:0c:96:ba:16:ee:
79:0b:c0:18:20:0a:2e:f8:0c:d7:23:17:8c:f9:e8:f7:6f:7f:
5a:7b:29:ec:14:01:dc:d5:b7:d9:86:b4:57:f7:13:a4:93:a4:
a0:43:b0:c4:ed:5c:96:82:8f:29:1b:f4:a0:1b:3e:df:f3:cd:
e0:b2:22:5b:66:9d:e9:0a:9b:ad:17:e8:78:da:37:d0:9d:17:
94:a8:4f:67:66:b1:6b:13:4a:69:aa:87:1c:1e:ae:45:11:20:
8b:0a:0e:da:c9:74:23:6a:01:18:67:45:56:5b:6d:80:dc:82:
f1:7d:3f:27:fe:f2:fe:67:c6:72:40:c0:70:93:31:ce:c7:f6:
61:7d:80:26:ae:62:63:5a:8f:95:62:1a:95:1e:dd:f0:87:c2:
67:56:32:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:23 2025 by rpki-client